WattStack dev scripts

Shared zsh scripts for the team. Install once; they keep themselves up to date.

Install

curl -fsSL https://ws-dev-scripts.pages.dev/install.sh | sh

Then, in order:

exec zsh — restart your shell so the loader takes effect.
gcloud auth login — once, so the scripts can read Secret Manager.
claude-accounts-refresh — caches your tokens for 30 days, so you will not need gcloud again for a month.

That's it. Run claude-accounts to see what you can reach.

Requirements

zsh, the macOS default since Catalina. These scripts use zsh-specific features and will not run under bash — the installer tells you if your login shell is wrong. Fix with chsh -s /bin/zsh.
gcloud, logged in as your @wattstack.io account. You need the development@wattstack.io group's access to wattstack-internal, which you almost certainly already have.
Claude Code on your PATH, for the c commands.

Commands

Command	What it does
`c`	Run Claude Code as whoever you are natively logged in as
`c /JACK2`	Run it as a specific shared account
`cx /ROB`	Same, plus `--dangerously-skip-permissions`
`claude-accounts`	Which accounts you can reach, telemetry status, cache age
`claude-usage`	Each account's 5-hour and 7-day allowance, and which has headroom
`claude-accounts-refresh`	Re-cache every token (run after `gcloud auth login`)
`claude-accounts-logout`	Clear cached tokens from your keychain
`ws-scripts`	Where the scripts came from and how fresh they are
`ws-scripts-update`	Fetch the latest now instead of waiting

Where your tokens live

Nowhere in these files. Every token is read from Google Secret Manager on first use and kept in your macOS login keychain, encrypted, for 30 days. Tokens are handed to a single claude process and never written to disk, exported into your wider shell, or entered into shell history.

This site is public so that installing needs no credentials. It contains no secrets — only the code that knows how to ask Secret Manager for them, which is useless without the IAM access. Never put a credential in a script here.

Available scripts

claude-accounts.zsh — Run Claude Code as any of the shared accounts, with telemetry wired up, no secrets on disk.

If something goes wrong

Symptom	Cause
`c: command not found`	The loader didn't run. Check your login shell is zsh, then `exec zsh`.
“cannot read secret”	gcloud isn't logged in, or you lack Secret Manager access. Run `gcloud auth login`.
“using cached credentials”	Harmless. Secret Manager was unreachable so your cached copy was used. Run `gcloud auth login && claude-accounts-refresh` when convenient.
Account missing from the list	Its secret doesn't exist yet, or you can't read it. `claude-accounts` lists what you can see.
Scripts seem out of date	Refresh is background and twice-daily. Force it with `ws-scripts-update`.

Adding a script

Drop a .zsh file into scripts/ in wattstack/dev-scripts, put a one-line # description on the second line, and merge to main. CI syntax-checks it and republishes here; every laptop picks it up within twelve hours. Nothing else to do.